New Friend (or an Old Friend who Built a New Account)
Registered: 1501005838 Posts: 39
Reply with quote #1
I have look over Event Logs and unable to find who rebooted it other than the time it was rebooted. Any one have a good some suggestions how i can find out who or what rebooted Domain Control? Regards, Charles
Registered: 1454887308 Posts: 598
Reply with quote #2
Is Automatically Restart checked in the Startup & Recovery settings under System Properties?
Registered: 1451844054 Posts: 155
Reply with quote #3
Did you check event logs,system for Event ID 1074? For example i just check with one of my servers and this ID says : The process explorer.exe has initiated the restart of computer computername on behalf of user domainame\username for the following reason.
__________________ Just call me the 1000Questionsguy
Associate Troublemaker Apprentice
Registered: 1451575798 Posts: 884
Reply with quote #4
Originally Posted by
charlesnm I have look over Event Logs and unable to find who rebooted it other than the time it was rebooted. Any one have a good some suggestions how i can find out who or what rebooted Domain Control? Regards, Charles If you have unique users for admins... Use the reboot time and find out who was the last to log one and potentially create a shutdown event. check Update history and updates applied. really paranoid...Remember that shutdown events can be scheduled for some time in advance
shutdown /? ... Set the time-out period before shutdown to several years. The valid range is 0-315360000 (10 years), with a default of 30 __________________ Have you tried turning it off and walking away? The next person can fix it!
New to the forum? Read this